mirror/postfixadmin
0
0
Fork 0
mirror of https://github.com/postfixadmin/postfixadmin.git synced 2024-09-19 19:22:14 +02:00
Code

avoid a clickjacking attack reported on huntr.dev by @ranjit-git

Browse Source
This commit is contained in:
David Goodwin 2021-08-04 20:38:06 +01:00
parent feb5cbc7f3
commit 64e98fcf97
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
common.php
View File

@ -27,6 +27,9 @@ if (!defined('POSTFIXADMIN')) { # already defined if called from setup.php
if (empty($_SESSION['flash'])) {
$_SESSION['flash'] = array();
}
// avoid clickjacking attacks?
header('X-Frame-Options: DENY');
}
}